Cribl, which helps companies monitor and analyze data created by their infrastructure, raises $200M Series C, source says at a $1.5B valuation
At a time when remote work, cybersecurity attacks and increased privacy and compliance requirements threaten a company's data …
Context & Ripple Effects
This round caps a fast climb: Cribl raised its $35M Series B led by Sequoia just ten months earlier to route infrastructure data to third-party monitoring tools, and the $200M Series C at a reported $1.5B valuation roughly quadruples that round's size. The stated demand drivers — remote work, cyberattacks, and privacy/compliance requirements — all push more machine data through the exact routing layer Cribl sells.
The arc continues after this story: a $150M Series D led by Tiger at $2.5B a year later, then a $200M GV-led round with a $119M secondary at $3.5B, and eventually the CardinalOps acquisition for around $100M — evidence that this Series C funded a platform buildout, not just headcount.
First-order effects
- Cribl now has $200M in new capital to scale its data-routing engine and sales motion while sitting at a reported $1.5B valuation, up sharply from the $35M Sequoia-led Series B.
- Companies drowning in machine-generated telemetry gain a better-funded neutral layer that decouples their monitoring and analytics tools from the data pipelines feeding them.
Second-order effects
- Observability and security-analytics incumbents face pricing pressure: a router that sits between infrastructure and their tools weakens the data-volume lock-in that has driven their per-GB economics.
- The funding arms Cribl for M&A — borne out by the later ~$100M CardinalOps purchase, which added AI-powered threat detection and a Tel Aviv office to the routing platform.
Third-order effects
- If the pattern holds, the observability market restructures around a data-control layer: vendors compete on analytics value at the edge of the pipeline rather than on owning the firehose, and buyers route data to whichever tool wins per workload.
- The successive rounds — Sequoia, then Tiger, then GV with a large secondary — show late-stage capital consolidating behind infrastructure plays positioned as neutral plumbing, a structure that favors one or two category-defining routers over point tools.
The trend: Enterprise data infrastructure is consolidating around a neutral routing and control layer, as security and compliance workloads make the pipe itself more valuable than the tools at either end.